Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDA4C405B4E11F0A38569B5DAE4EC9C.roa
File: 9DDA4C405B4E11F0A38569B5DAE4EC9C.roa (raw, json)
Hash identifier: 8IwqNADVx1Ut0t/T1uunooIS+Xj5VBlmCPGkFxKZ4LI=
Subject key identifier: 0A:7E:DD:71:2F:21:D1:75:C4:7F:85:CB:11:0A:82:24:62:4C:68:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016328
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDA4C405B4E11F0A38569B5DAE4EC9C.roa
Signing time: Mon 07 Jul 2025 16:22:47 +0000
ROA not before: Mon 07 Jul 2025 16:22:42 +0000
ROA not after: Thu 23 Jul 2026 16:22:42 +0000
asID: 136744
IP address blocks: 45.206.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90920 (0x16328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 16:22:42 2025 GMT
Not After : Jul 23 16:22:42 2026 GMT
Subject: CN=686bf457-e0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:86:4b:6f:f9:2c:4c:65:83:37:06:42:94:
80:65:e9:e0:85:d4:76:c0:12:61:08:d8:ce:9c:6d:
b8:02:d8:b8:03:5b:ae:9f:d2:a1:04:82:7c:22:7b:
62:12:0f:88:77:26:a7:10:b0:43:20:63:03:95:42:
f5:05:77:88:da:dd:cd:d7:c6:a8:cd:d5:4c:c1:8c:
8f:14:cc:5c:78:2c:18:da:2a:79:9b:aa:f0:50:41:
44:07:cb:11:34:dd:9a:6b:a1:94:68:56:5a:2c:4e:
22:c2:a2:bf:99:5b:60:3e:a8:f0:32:38:97:8e:63:
5e:79:2c:84:1b:06:be:9e:04:ff:6d:0d:33:18:10:
9a:57:6c:df:3d:34:64:01:bb:7c:23:ab:61:0d:a1:
62:dd:f6:0b:b9:8f:b0:21:64:d1:9d:3a:0e:ad:e8:
e2:b2:20:62:28:72:3f:d2:8a:c4:7a:b5:ee:9a:9f:
b1:37:a6:b5:88:eb:8d:92:6f:57:a4:f7:fd:10:78:
b4:30:86:7e:59:6f:e6:a6:8a:24:32:35:06:cd:14:
e8:c1:c4:30:73:83:a3:9d:55:0b:57:3e:c9:02:e8:
7e:fd:e0:47:ff:62:54:f6:2e:34:f7:3a:ee:fd:f6:
ef:3a:6d:bc:fa:f0:49:77:a5:1b:bb:4a:1d:2b:aa:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:DD:71:2F:21:D1:75:C4:7F:85:CB:11:0A:82:24:62:4C:68:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DDA4C405B4E11F0A38569B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.60.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c4:d8:a5:7b:bc:3b:4b:9b:49:98:d2:c7:f9:97:2a:51:cc:
9c:86:b6:52:13:10:21:52:e7:3b:e1:d6:e1:09:68:de:43:57:
51:3e:10:42:d9:5d:19:7b:ec:4b:25:e9:4d:38:66:1b:bd:0e:
60:57:76:54:4d:ab:67:04:e7:71:06:fa:dd:ae:84:4d:3f:b1:
d8:9a:20:06:e2:50:dc:f6:a2:64:2b:d7:c5:2e:51:b2:05:b9:
fa:db:88:aa:ef:0a:46:7d:3d:96:a1:25:a1:aa:05:bd:e8:61:
cb:fe:f5:1e:ae:06:7f:d3:58:30:e0:bb:f7:3b:b9:48:c0:f5:
39:8f:e1:e6:31:0d:62:b1:5c:19:02:39:d8:c9:80:d0:82:84:
5b:e9:20:42:9d:e2:a3:99:f6:c6:0b:15:f9:e4:68:54:bd:40:
d2:bb:1c:0b:a3:6b:1d:5e:b8:fb:35:5a:24:35:3c:6b:9e:3f:
83:61:9b:55:a8:7b:92:d0:34:bf:11:68:33:44:d2:27:34:ac:
4f:2d:62:2e:50:9f:b0:25:0b:fd:a0:99:32:ea:21:0a:1e:9d:
ff:60:06:f4:5d:86:29:e8:be:33:a7:a4:e0:12:f8:5f:d9:c8:
76:b1:46:23:11:c5:78:bd:04:f8:f0:bf:6e:d2:d7:8b:c8:13:
4d:00:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:35:26 2025 by rpki-client